jira-importer commented on issue #394: URL: https://github.com/apache/maven-apache-parent/issues/394#issuecomment-2771704825
**[Michael Osipov](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=michael-o)** commented Regarding 3: Which Maven version are you using? It was an issue with previous Resolver versions. General question: Who is the target audience for this file? Vote participants? Maven Resolver? Please note: This file is NOT intended for verification, it is transport only. See https://maven.apache.org/resolver/about-checksums.html. Verification is signatures only. If the source release should only be in the dist area then it should be accompanied with a BSD style hash file for external verification and not be present on Maven Central at all. My personal question has always been: Why does it need to be on Central at all?! [Tamas Cservenak](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=cstamas), [Herve Boutemy](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=hboutemy). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
